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WHAT IS CLAIMED ISs 

1 1. A security device comprising: 

2 a memory device comprising: 

3 a first memory portion configured to store a 

4 device ID; and 

5 a second memory portion configured to store 

6 a device secret; 

7 a processor connected to the memory device, the 

8 processor configured to read the stored device ID from 

9 the first memory portion and the stored device secret 

10 from the second memory portion and perform a 

11 nonreversible computation using the stored device ID, 

12 the stored device secret, and a challenge as seeds; and 

13 a communication circuit connected to the 

14 processor, the communication circuit configured to 

15 receive the challenge from a host device and to 

16 communicate a result of the nonreversible computation 

17 performed by the processor. 
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1 2. The security device of claim 1, wherein the memory 

2 device further comprises: 

3 a third memory portion configured to store a 

4 service provider data item; 

5 wherein the stored service provider data item is 

6 also used to seed the nonreversible computation. 

1 3. The security device of claim 2, wherein the memory 

2 device further comprises: 

3 a fourth memory portion configured to store a 

4 counter value that is incremented responsive to the 

5 service provider data item being changed; 

6 wherein the stored counter value is also used to 

7 seed the nonreversible computation. 

1 4- The security device of claim 1, wherein the first 

2 memory portion comprises a nonvolatile and unalterable 

3 memory device . 

1 5. The security device of claim 4, wherein the second 

2 memory portion comprises an unalterable memory portion. 
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1 6. The security device of claim 1, wherein the 

2 communication circuit operates according to a one-wire 

3 protocol . 

1 7. The security device of claim 1, wherein the 

2 security device is incorporated into a smart card. 

1 8. The security device of claim 1, wherein the 

2 security device is attached to a printer cartridge. 

1 9. The security device of claim 1, wherein the 

2 security device is incorporated into a host device. 

1 10. The security device of claim 1, wherein the 

2 nonreversible computation is a SHA-1 computation. 

1 11. The security device of claim 10, wherein the 

2 processor is configured to perform the SHA-1 

3 computation serially. 



1 12. The security device of claim 10, wherein the 

2 processor is configured to perform the SHA-1 

3 computation in parallel. 
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13 . A method of device authentication comprising the 
steps of: 

receiving a challenge from a devices- 
generating a nonreversible computation result; and 
outputting a response to the challenge, wherein 

the outputted response includes the nonreversible 

computation result ; 

wherein the nonreversible computation result is 

computed by seeding an algorithm with the received 

challenge, a device secret, and a unique device 

identifier. 

14. The method of claim 13, further comprising the 
steps of: 

generating a challenge; 

transmitting the challenge to the device; 

receiving a response from the device, the response 
including the result of the nonreversible computation, 
which is seeded with at least the challenge; and 

authenticating the response from the device. 
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15. The method of claim 13, wherein the step of 
receiving comprises the step of: 

receiving a challenge from a remote security 
device . 

16. The method of claim 13, further comprising the 
steps of : 

receiving the outputted response at the device; 

and 

authenticating the received response. 

17. The method of claim 15, further comprising the 
step of : 

enabling an electronic device responsive to a 
positive authentication of the received response. 

18. The method of claim 15, further comprising the 
step of ; 

disabling an electronic device responsive to a 
failure to authenticate the received response. 
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1 19 . A system for device authentication, the system 

2 comprising: 

3 a coprocessor security device configured to store 

4 a service provider data item and a device secret; and 

5 a host device connected to the coprocessor 

6 security device, the host device configured to 

7 communicate with the coprocessor security device and a 

8 roaming security device; 

9 wherein the roaming security device can be 
10 authenticated to thereby enable the host device. 

1 20. The system of claim 19, further comprising: 

2 a printer, wherein the coprocessor security device 

3 is attached to the printer. 

1 21. The system of claim 19, further comprising a means 

2 for attaching the roaming security device to a printer 

3 cartridge, 

1 22. The system of claim 19, further comprising: 

2 a means for attaching the roaming security device to a 

3 printer. 
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23. The system of claim 20, wherein the printer 
cartridge is disabled responsive to the roaming 
security device being removed from the printer 
cartridge . 

24. A method of device authentication, the method 
comprising the steps of: 

receiving, at a roaming device, a challenge from 
a host device; 

generating, at the roaming device, a nonreversible 
computation result, wherein the nonreversible 
computation result is computed by seeding a 
nonreversible algorithm with at least the challenge and 
a device secret ; and 

outputting to the host device a response to the 
challenge, wherein the outputted response includes the 
nonreversible computation result. 
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25. The method of claim 23, further comprising the 
steps of : 

generating a challenge at the roaming devices- 
transmitting the challenge from the roaming device 

to the host device; 

receiving a response from the host device, the 

response including the result of the nonreversible 

algorithm seeded with at least the challenge; and 

authenticating, at the roaming device, the 

response from the host device. 

26. The method of claim 23, further comprising the 
steps of: 

receiving the outputted response at the host 
device ; and 

authenticating the received response at the host 
device . 

27. The method of claim 24, further comprising the 
step of : 

enabling an electronic device responsive to a 
positive authentication of the received response. 
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28. The method of claim 24, further comprising the 
step of : 

disabling an electronic device responsive to a 
failure to authenticate the received response. 

29. The method of claim 24, wherein the nonreversible 
computation result is computed by further seeding the 
nonreversible algorithm with a unique device 
identifier . 

30. A security device comprising: 

a memory device comprising a first memory portion 
configured to store a device secret; 

a processor connected to the memory device, the 
processor configured to read the stored device secret 
from the first memory portion and to perform a hash 
computation using at least the stored device secret and 
a challenge as seeds; and 

a communication circuit connected to the 
processor, the communication circuit configured to 
receive the challenge from a host device and to 
communicate a result of the hash computation performed 
by the processor. 
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31. The security device of claim 30, wherein the 
memory device is configured to store a partial secret. 

32. The security device of claim 31, wherein the 
processor is configured to compute the device secret 
using the partial secret. 

33. The security device of claim 30, wherein the 
memory device further comprises : 

a second memory portion configured to store a 
printed page count; and 

a third memory portion configured to store a 
maximum page count ; 

wherein the processor is configured to generate a 
signal responsive to the stored printed page count 
being equal to or exceeding the stored maximum page 
count . 
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